In a non-name-mapped DSfW environment, the Users container is typically cn=Users,dc=domain,dc=com. Note that the Users container object type is cn, not ou.

During the data sync installation, when asked for the users/groups container, the dialog won't accept container of type cn. I had to point it to an ou to get past that step; it will not accept dc either for that matter; then later, in the web admin interface, I could change it to the correct container.

The error message is something like "verify failed for (dsfw container name)".

I guess this is a bug in the install pyc module.